[Openvpn-devel] [PATCH applied] Re: tun: remove tun_finalize()

2022-01-21 Thread Gert Doering
Test compiled with MinGW. Not runtime tested. Adjusted the prototype to be in-one-line, as instructed. And have ignored the other nits :-) Your patch has been applied to the master branch. commit bcf04b0b8e3c0f142ab0ec97627ea140c80c7962 Author: Lev Stipakov Date: Mon Jan 17 11:49:17 2022 +0

[Openvpn-devel] [PATCH applied] Re: vcpkg-ports/pkcs11-helper: bump to release 1.28

2022-01-21 Thread Gert Doering
I have no idea what this does, but I understand that it's related to MSVC building and that we generally want/need to bump pkcs11-helper to version 1.28 -> so, this is what it does :-) Since this does not touch anything code or mingw-build-related I have not tested it beyond "does 'git show' look

[Openvpn-devel] [PATCH applied] Re: vcpkg-ports/pkcs11-helper: indicate OpenSSL EC support

2022-01-21 Thread Gert Doering
Acked-by: Gert Doering As stated before, I have no idea what this does - but it doesn't touch code or MinGW building (= not tested anything) and looks reasonable for the purpose described. It would be good to have 2.5 test installers with this, to verify that PKCS#11 and EC do work now... Your

Re: [Openvpn-devel] [PATCH v3 21/21] Always use 8192 bytes for ERR_BUF_SIZE

2022-01-21 Thread Gert Doering
Hi, On Tue, Oct 19, 2021 at 08:31:27PM +0200, Arne Schwabe wrote: > The signature messages required by external key managed also break > the 1280 limit. To also avoid this surprise of different behaviour > with PKCS11 enabled/disable, always use the larger size. JFTR, this patch has been obsolete

[Openvpn-devel] [PATCH v2] GitHub Actions: add other config flavours

2022-01-21 Thread Antonio Quartulli
In the past we had issues with patches accidentally breaking less common OpenVPN configurations. For this reason it makes sense to some of those configurations build via CI. Adding: * --enable-iproute2 * --enable-async-push * --disable-management * --enable-small * --disable-lzo --disable-lz4 The

[Openvpn-devel] [PATCH applied] Re: GitHub Actions: add other config flavours

2022-01-21 Thread Gert Doering
Acked-by: Gert Doering Sounds useful. We should not overdo the "burn energy for testing build variants" thing, but "not test problematic variants" is not good either. Your patch has been applied to the master branch. commit 8ee0997abd0642c4c4a6135573beba647d982f7c Author: Antonio Quartulli Dat

[Openvpn-devel] [PATCH v2] unit-test: fix test_crypto when USE_COMP is not defined

2022-01-21 Thread Antonio Quartulli
This unit-test did not consider the case when USE_COMP is not defined, thus generating a compiler error. Adapt the test to the case when no compression is available. Cc: Arne Schwabe Signed-off-by: Antonio Quartulli --- v2: * restore original MTU numbers - this can be addressed by another patc

Re: [Openvpn-devel] [PATCH v2] unit-test: fix test_crypto when USE_COMP is not defined

2022-01-21 Thread Gert Doering
Hi, On Fri, Jan 21, 2022 at 03:09:41PM +0100, Antonio Quartulli wrote: > This unit-test did not consider the case when USE_COMP is not defined, > thus generating a compiler error. > > Adapt the test to the case when no compression is available. > > Cc: Arne Schwabe > Signed-off-by: Antonio Quar

[Openvpn-devel] [PATCH v3] unit-test: fix test_crypto when USE_COMP is not defined

2022-01-21 Thread Antonio Quartulli
This unit-test did not consider the case when USE_COMP is not defined, thus generating a compiler error. Adapt the test to the case when no compression is available. Cc: Arne Schwabe Signed-off-by: Antonio Quartulli --- v2: * restore original MTU numbers - this can be addressed by another patc

[Openvpn-devel] [PATCH applied] Re: unit-test: fix test_crypto when USE_COMP is not defined

2022-01-21 Thread Gert Doering
Acked-by: Gert Doering This looks better, and actually works :-) Your patch has been applied to the master branch. commit 33d9c7ace354693168c093550bd5a9f4dfed4078 Author: Antonio Quartulli Date: Fri Jan 21 15:43:13 2022 +0100 unit-test: fix test_crypto when USE_COMP is not defined

Re: [Openvpn-devel] [PATCH v3] crypto: Fix OPENSSL_FIPS enabled builds

2022-01-21 Thread Gert Doering
Hi, On Wed, Jan 19, 2022 at 07:21:26PM +0100, David Sommerseth wrote: > index 5626e2b6..eb0b1254 100644 > --- a/src/openvpn/crypto.c > +++ b/src/openvpn/crypto.c > @@ -34,6 +34,7 @@ > #include "error.h" > #include "integer.h" > #include "platform.h" > +#include "openssl_compat.h" > > #includ

[Openvpn-devel] [PATCH] Do not error when md_kt_size() is called with mdname="none"

2022-01-21 Thread selva . nair
From: Selva Nair An easy way to trigger this error is to run an otherwise working setup (at say verb = 4) with increased verbosity of verb >= 7 and using a GCM cipher (e.g., AES-256-GCM). It will cause a fatal exit while printing the cipher and hmac in key2_print(). Signed-off-by: Selva Nair

Re: [Openvpn-devel] [PATCH v3] crypto: Fix OPENSSL_FIPS enabled builds

2022-01-21 Thread Selva Nair
Hi On Fri, Jan 21, 2022 at 12:10 PM Gert Doering wrote: > Hi, > > On Wed, Jan 19, 2022 at 07:21:26PM +0100, David Sommerseth wrote: > > index 5626e2b6..eb0b1254 100644 > > --- a/src/openvpn/crypto.c > > +++ b/src/openvpn/crypto.c > > @@ -34,6 +34,7 @@ > > #include "error.h" > > #include "integ

[Openvpn-devel] [PATCH] crypto: Fix mbedtls builds

2022-01-21 Thread David Sommerseth
From: David Sommerseth With commit 544330fefedc87, the openssl_compat.h got included in crypto.c. This caused issues when building against mbed TLS, which this compat layer is not targeting. This issue is resolved by only including this header when the OpenSSL library is in use. The OPENSSL_FI

[Openvpn-devel] [PATCH 2.5] GitHub Actions: update script to same version as master

2022-01-21 Thread Antonio Quartulli
Signed-off-by: Antonio Quartulli --- This patch combines some master commits in order to bring the GH script up to the same state as the one in master (minus OpenSSL3 related changes). .github/workflows/build.yaml | 68 1 file changed, 61 insertions(+), 7 de

Re: [Openvpn-devel] [PATCH] Make build deterministic, remove __DATE__

2022-01-21 Thread Antonio Quartulli
Hi, On 13/12/2021 17:28, Frank Lichtenheld wrote: The information provided by this is minimal and it makes it more difficult to provide deterministic builds. There are work-arounds for that but I think it is easier to just remove it completely. Allows the build to pass with -Wdate-time -Werror.

Re: [Openvpn-devel] [PATCH 2.5] GitHub Actions: update script to same version as master

2022-01-21 Thread Arne Schwabe
Am 21.01.22 um 21:49 schrieb Antonio Quartulli: Signed-off-by: Antonio Quartulli --- This patch combines some master commits in order to bring the GH script up to the same state as the one in master (minus OpenSSL3 related changes). Acked-By: Arne Schwabe _

Re: [Openvpn-devel] [PATCH] Do not error when md_kt_size() is called with mdname="none"

2022-01-21 Thread Arne Schwabe
Am 21.01.22 um 19:57 schrieb selva.n...@gmail.com: From: Selva Nair An easy way to trigger this error is to run an otherwise working setup (at say verb = 4) with increased verbosity of verb >= 7 and using a GCM cipher (e.g., AES-256-GCM). It will cause a fatal exit while printing the cipher and